CVE-2026-81166
Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1.
- Published Sep 2, 2026
- CVSS 5.3 medium
- 0.3% chance of exploitation in the next 30 days (EPSS)